Skip to main content
A
Anonymous
June 19, 2009
Question

LoginID assinged to a session variable.

  • June 19, 2009
  • 1 reply
  • 879 views

I was wondering is it possible to assign CFlogin.username to a session ID?

I am matching SessionID with my authorized users list which allows them the access the intranet page.

I am unable to assign the values since I believ my Application.cfm and Auth.cfm(which checks the users list=session.USRID) runs before my login form. Any simple way or achieving CFlogin.username to a session ID(JsessionID,CFID ) at the time of cflogin input?

    This topic has been closed for replies.

    1 reply

    A
    Anonymous
    June 19, 2009

    Do you have access to the Auth page where the cflogin is present? If so, wouldn't it be ideal to set the Session variable after the user authenticates?

    A
    Anonymous
    June 19, 2009

    Actually that is what I am trying to do but Session does not seem to carry value to my Security.cfm page.  Assuming Session are defined in Application.cfm correctly.And I am trying to use J2EE session.jsessionID but donot know how can it be helpful to carry my userId to security.cfm.

    LDAP_Auth.cfm

    (Authenticate page which checks userId/Password (works grt) on the same page I am assigning cflogin.name to session.USERID)

    <cfset LoginMessage ="User #Authenticateuser.username# #username# is logged in" >
                  
    <!--- Login ID for session  --->
       <
                  <cfset Session.USERID= "#cflogin.username#"> 

            <cfdump var="#session#" > 
                    
                                  <cflocation addtoken="no" url="../index.cfm"> (index then calls a page Security.cfm before giving access which checks users list against the session variable )
          

    Security.cfm

    <CFOUTPUT>

    <CFLOCK SCOPE="session" TIMEOUT="30" TYPE="Exclusive">
     
      <CFSET session.USERID="#session.USERID#">

            
    </CFLOCK>
    </CFOUTPUT>

    So If you can suggest me a code or valuable information just how to pass the value once I pass UserID to my security.cfm so that it matches session.USERID=cflogin.username and then I can get access to intranet page. When I hardcode my name in Session.USERID it works fine, seems like only passing a value is the issue now.

    A
    Anonymous
    June 19, 2009

    Once the login ID is set in a session variable, that variable will remain there unless it is removed by code deleting the structure key, or if the session has times out.

    I am assuming in your Application file, you have sessionmanagement=yes". The default value is no, so if this attribute isn't provided in the <cfapplication> tag, then I don't think it will work. I've never tried. I am just going by the docs.

    One thing I notice is that Security file, you are assigning the session.userID value to session.userID. You are assigned a value to itself so that's not what you want.

    It seems as though you are using LDAP judging by your filename (which I have no experience with), but here is my snipped of code I use for my login:

         <!--- [START] Login script --->
         <cflogin idletimeout="1800">
         
              <!--- Now test the credentials against the query --->
              <cfquery name="qryLogin" datasource="#application.dsn.getDSN()#">
              SELECT     *
              FROM      User
              WHERE      Username = <cfqueryparam value="#form.username#" cfsqltype="cf_sql_varchar"> AND
                        Password = <cfqueryparam value="#Hash(form.password)#" cfsqltype="cf_sql_varchar">
              </cfquery>
              
              <!--- If the query has a RecordCount, the user was logged in --->
              <cfif qryLogin.RecordCount>
                   <cfloginuser name="#qryLogin.UserID#, #qryLogin.Username#" password="#Form.Password#" roles="#trim(ValueList(qryLogin.Roles))#">
                   
                        <cfset session.userID = qryLogin.UserID>
                        <cfset session.username = qryLogin.Username>
                        <cfset session.userRoles = trim(ValueList(qryLogin.Roles))>
                   
                   <cfset loggedIn = true>
                   <cfset reqLogin = false>
              
              <!--- If the login wasn't successful, take the user back to the page with a message --->
              <cfelse>
                   <cfset loggedIn = false>
                   <cfinclude template="/login.cfm">
              </cfif>
         
         </cflogin>

    Let me know if this helps at all.

    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices